$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150524.roa File: AS150524.roa (raw, json) Hash identifier: KQ/zEDaVHdw9IKQXrR+jVl4c2e2eqz74/tVBy683wI0= Subject key identifier: 2A:60:C0:51:4E:E3:A4:AB:54:A0:C8:26:9E:E4:35:21:A7:49:BA:4D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 112E21764603A13D9C85EEB646542881E119F75B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150524.roa Signing time: Sat 02 May 2026 08:37:02 +0000 ROA not before: Sat 02 May 2026 08:32:02 +0000 ROA not after: Sat 01 May 2027 08:37:02 +0000 asID: 150524 IP address blocks: 103.112.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2e:21:76:46:03:a1:3d:9c:85:ee:b6:46:54:28:81:e1:19:f7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:02 2026 GMT Not After : May 1 08:37:02 2027 GMT Subject: CN=2A60C0514EE3A4AB54A0C8269EE43521A749BA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:56:f3:00:c5:f4:89:28:fc:ff:22:ef:d1: 5d:15:99:be:9b:50:4e:81:e2:1f:08:4f:bd:7d:60: ff:eb:a8:5d:52:1c:40:e2:19:22:93:da:ec:52:3b: e4:25:24:02:c9:76:47:bd:7f:33:f5:de:dc:c6:25: 1b:31:32:ff:59:09:bc:44:dd:ae:09:aa:9f:82:8e: 87:ac:c2:72:5b:86:e1:cf:42:84:1b:18:fc:43:23: bd:f3:42:0c:8e:03:e8:60:57:62:45:cf:58:fe:ec: d4:d6:7c:d5:e4:63:6b:7e:8d:e6:f9:95:b0:f2:6f: dc:26:65:1c:89:f1:2d:39:de:00:3f:ef:d8:21:06: f2:0e:fb:0a:b9:ac:fd:f8:7d:77:f8:10:9a:1a:30: fa:22:24:33:cc:26:d5:9f:54:c3:71:f5:95:c2:0d: 2f:7b:54:7b:e6:2e:72:f7:36:3c:02:b1:c0:77:f5: 60:8a:38:18:60:40:a1:0a:6e:52:0c:1c:41:ff:83: 6a:a8:f3:74:b3:bb:6c:b8:01:98:8a:29:cc:5e:57: 24:bd:1c:11:8c:52:21:f2:42:25:f1:fd:ed:a4:92: cb:24:ef:25:b5:f4:95:76:64:85:3c:24:57:1e:fd: 81:14:15:b1:c3:5a:4c:d9:a2:86:3a:47:fb:c4:77: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:60:C0:51:4E:E3:A4:AB:54:A0:C8:26:9E:E4:35:21:A7:49:BA:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.120.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:27:65:4f:2c:d5:f4:89:dc:4c:0c:37:9d:7b:2d:ab:fc:ab: ef:86:bd:e3:29:bf:7d:01:d2:3f:4a:f5:78:7d:6d:d3:50:81: b0:51:d7:b0:3c:ad:b4:f3:78:b6:c2:1e:d0:97:ae:54:93:a5: 68:05:53:44:84:04:67:c9:8a:39:a8:73:21:54:63:60:73:60: 7c:31:f7:91:18:51:b8:19:52:12:22:9d:34:3b:39:7c:f8:0e: ce:ff:31:7d:b0:0b:8a:27:c3:fb:e4:28:3f:78:1d:33:7b:bc: 18:c5:8e:23:da:76:e6:e3:57:26:96:09:ed:24:84:58:be:be: f2:3a:b4:de:f5:b1:cf:a0:11:6c:87:3c:ea:f8:85:22:ee:05: 9f:9a:70:42:89:80:0a:d6:15:7a:51:79:8d:93:09:2d:ba:8f: 38:9d:7e:24:81:c6:cd:15:90:89:e0:a2:db:4a:3a:1d:96:fe: ce:f5:e8:c6:b1:6f:e0:dd:ef:40:d9:8b:8a:ac:f8:42:70:b0: 46:31:78:d2:14:86:c6:35:45:92:b7:43:64:c3:a0:36:ac:b1: 12:e0:6f:31:15:c6:e6:9f:c1:75:66:8f:c5:f9:c3:a0:17:87: f2:9b:9b:11:29:ec:65:48:5e:c5:27:24:75:01:85:73:77:10: 8b:f3:c8:0c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUES4hdkYDoT2che62RlQogeEZ91swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwMloX DTI3MDUwMTA4MzcwMlowMzExMC8GA1UEAxMoMkE2MEMwNTE0RUUzQTRBQjU0QTBD ODI2OUVFNDM1MjFBNzQ5QkE0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALspVvMAxfSJKPz/Iu/RXRWZvptQToHiHwhPvX1g/+uoXVIcQOIZIpPa7FI7 5CUkAsl2R71/M/Xe3MYlGzEy/1kJvETdrgmqn4KOh6zCcluG4c9ChBsY/EMjvfNC DI4D6GBXYkXPWP7s1NZ81eRja36N5vmVsPJv3CZlHInxLTneAD/v2CEG8g77Crms /fh9d/gQmhow+iIkM8wm1Z9Uw3H1lcINL3tUe+Yucvc2PAKxwHf1YIo4GGBAoQpu UgwcQf+DaqjzdLO7bLgBmIopzF5XJL0cEYxSIfJCJfH97aSSyyTvJbX0lXZkhTwk Vx79gRQVscNaTNmihjpH+8R3RdECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQqYMBR TuOkq1SgyCae5DUhp0m6TTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ3B4MA0GCSqGSIb3DQEBCwUAA4IBAQCdJ2VPLNX0idxMDDedey2r/Kvv hr3jKb99AdI/SvV4fW3TUIGwUdewPK2083i2wh7Ql65Uk6VoBVNEhARnyYo5qHMh VGNgc2B8MfeRGFG4GVISIp00Ozl8+A7O/zF9sAuKJ8P75Cg/eB0ze7wYxY4j2nbm 41cmlgntJIRYvr7yOrTe9bHPoBFshzzq+IUi7gWfmnBCiYAK1hV6UXmNkwktuo84 nX4kgcbNFZCJ4KLbSjodlv7O9ejGsW/g3e9A2YuKrPhCcLBGMXjSFIbGNUWSt0Nk w6A2rLES4G8xFcbmn8F1Zo/F+cOgF4fym5sRKexlSF7FJyR1AYVzdxCL88gM -----END CERTIFICATE-----Generated at Sun May 3 00:42:15 2026 by rpki-client